DNS trap issue

[Cathy_Cheng]

We have enabled DNS Trap . When a laptop is configured to use a public DNS server (e.g., 8.8.8.8), DNS queries are sent directly to the internet. In this case, DNS Trap operates as expected, and nslookup a malious domain resolves to the DNS Trap IP address.

However, when the DNS setting is changed to use our internal DNS server, nslookup no longer resolves to the DNS Trap IP.

client-to-internal DNS traffic does not pass through the firewall, while only the traffic from the internal DNS server to external DNS servers traverses the firewall.

For DNS Trap to function with forwarded queries, the firewall must be positioned between the client and the internal DNS server?

[Chris_Atkinson · Accepted solution]

The DNS Trap will only be effective if the Security Gateway is between the client and DNS server.